What are the best practices for assigning and formatting data for display in Smarty templates with PHP?

When assigning and formatting data for display in Smarty templates with PHP, it's important to properly sanitize and format the data to prevent security vulnerabilities and ensure a consistent presentation. To achieve this, use PHP functions like htmlspecialchars() to escape HTML characters and maintain data integrity. Additionally, consider creating separate PHP functions to handle specific formatting tasks, such as date formatting or number formatting, before assigning the data to Smarty variables. 

// Example of assigning and formatting data for display in Smarty templates

// Assume $data is an array containing data to be displayed
$data = [
    'name' => '<script>alert("XSS attack!")</script>',
    'date' => '2022-01-01',
    'amount' => 1000.50
];

// Sanitize and format data before assigning to Smarty template
$smarty->assign('name', htmlspecialchars($data['name']));
$smarty->assign('formatted_date', date('F j, Y', strtotime($data['date'])));
$smarty->assign('formatted_amount', number_format($data['amount'], 2));

Keywords

Smarty PHP data formatting display templates

Related Questions